D-Link DWS-4026 Product Manual - Page 429

Software User Manual 12/10/09 D-Link Unified Access System Field Client QoS Client QoS Bandwidth Limit Down Client QoS Bandwidth Limit Up Client QoS Access Control Down Client QoS Access Control Up Table 263: Wireless Network Configuration (Cont.) Description The Client QoS parameters allow the switch to apply access control lists (ACLs) and differentiated service (DiffServ) policies to wireless clients associated to the AP and extend the switch QoS features into the wireless domain. Select this option to enable Client QoS operation for wireless clients that associate with the AP using the SSID in the previous field. Client QoS provides control over certain QoS aspects of wireless clients that connect to the network, such as the amount of bandwidth and type of traffic an individual client is allowed to send and receive. To control general categories of traffic, such as HTTP traffic or traffic from a specific subnet, you can configure ACLs and assign them to one or more VAPs. Client QoS also allows you to configure per-client conditioning of various micro-flows through DiffServ. ACLs are a collection of permit and deny conditions, called rules, that provide security by blocking unauthorized users and allowing authorized users to access specific resources. ACLs can block any unwarranted attempts to reach network resources. Each ACL is a set of up to ten rules applied to traffic sent from a wireless client or to be received by a wireless client. Each rule specifies whether the contents of a given field should be used to permit or deny the packet from being transmitted. Rules can be based on various criteria and may apply to one ore more fields within a packet, such as the source or destination IP address, the source or destination L4 port, or the protocol carried in the packet. DiffServ policies are a useful tool for establishing general micro-flow definition and treatment characteristics that can be applied to each wireless client, both inbound and outbound, when it is authenticated on the network. Packets are classified and processed based on defined criteria. The classification criteria is defined by a class. The processing is defined by a policy's attributes. Enter the maximum allowed transmission rate from the AP to the wireless client in bits per second. The valid range is 0-4294967295 bps. A non-zero configured value is rounded down to the nearest 64 Kbps value for use in the AP, but to no less than 64 Kbps. A value of 0 means that the bandwidth maximum limit is not enforced in this direction. Enter the maximum allowed client transmission rate to the AP in bits per second. The valid range is 0-4294967295 bps. A non-zero configured value is rounded down to the nearest 64 Kbps value for use in the AP, but to no less than 64 Kbps. A value of 0 means that the bandwidth maximum limit is not enforced in this direction. Select the name of the access list applied to traffic in the outbound (down) direction. Only existing IP access lists are listed in the menu and are prefixed with the access list type. To create an IP access list, use the pages in the LAN > Access Control Lists folder. • On the IP ACL Configuration page, create a new standard, extended, or named IP ACL. • On the IP ACL Rule Configuration page, create one or more rules to define the packet match criteria and the deny or permit action for each rule. After switching the packet to the outbound interface, the ACL rules are checked for a match. The packet is transmitted if it is permitted, and discarded if it is denied. Select the name of the access list applied to traffic in the inbound (up) direction. Only existing IP access lists are listed in the menu and are prefixed with the access list type. To create an IP access list, use the pages in the LAN > Access Control Lists folder. • On the IP ACL Configuration page, create a new standard, extended, or named IP ACL. • On the IP ACL Rule Configuration page, create one or more rules to define the packet match criteria and the deny or permit action for each rule. When a packet is received by the AP, the ACL rules are checked for a match. The packet is processed if it is permitted, and discarded if it is denied. Document 34CSFP6XXUWS-SWUM100-D7 Basic Setup Page 429